Professional Cloud Security Engineer Exam - Question 13

Question

A customer's data science group wants to use Google Cloud Platform (GCP) for their analytics workloads. Company policy dictates that all data must be company-owned and all user authentications must go through their own Security Assertion Markup Language (SAML) 2.0 Identity Provider (IdP). The

Infrastructure Operations Systems Engineer was trying to set up Cloud Identity for the customer and realized that their domain was already being used by G Suite.

How should you best advise the Systems Engineer to proceed with the least disruption?

Examice · Accepted Answer

To comply with company policy, the best course of action, with the least disruption, is to collaborate with the existing Super Administrator. As the domain is already in use, this approach will integrate the new requirements into the existing setup without requiring significant changes or initiating complex processes like domain contestation.

syllox · Answer

Ans :D

TNT87 · Answer

The answer is A
"This domain is already in use"
If you receive this message when trying to sign up for a Google service, it might be because:

You recently removed this domain from another managed Google account. It can take 24 hours (or 7 days if you purchased your account from a reseller) before you can use the domain with a new account.
You or someone in your organization already created a managed Google account with your domain. Try resetting the administrator password and we’ll send an email to the secondary email you provided when you signed up, telling you how to access the account.
You’re using the domain with another managed Google account that you own. If so, remove the domain from the other account.
Contact us
If none of these applies, the previous owner of your domain might have signed up for a Google service. Fill out this form and the Support team will get back to you within 48 hours.

idtroo · Answer

Answer is D.

https://support.google.com/cloudidentity/answer/7389973
If you're an existing Google Workspace customer
Follow these steps to sign up for Cloud Identity Premium:

Using your administrator account, sign in to the Google Admin console at admin.google.com. 
From the Admin console Home page, at the top left, click Menu ""and thenBillingand thenGet more services.
Click Cloud Identity.
Next to Cloud Identity Premium, click Start Free Trial.
Follow the guided instructions.

TNT87 · Answer

Sorry Ans is D

shetniel · Answer

If the domain is already in use by Google Workspace (GSuite); then there is no need of setting up Cloud Identity again. The least disruptive way would be to work with the existing super administrator. Domain contestation form is required when you need to reclaim the domain or recover the super admin access. This might break a few things if not planned correctly.

[Removed] · Answer

"D" is the most sensible option. The other options would be forms of escalation if D was not possible.

saurabh1805 · Answer

D is best answer here.

[Removed] · Answer

Ans - D

ronron89 · Answer

I think its D.

@SomabrataPani: did you pass this exam yet?

Sammydp202020 · Answer

Answer : A

Here's why --> 
https://support.google.com/a/answer/6286258?hl=en

When the form is launched > opens a google ticket. Therefore, A is the appropriate answer to this Q

mahi9 · Answer

Ans: D is viable option

CloudTrip · Answer

A, B are definitely not the answer for this. Most of you are aligned with D but can somebody explain what is wrong with C ? Their domain is already used by the G-Suite. It will be least disruptive also.

Ksrp · Answer

its A , https://support.google.com/a/answer/6286258?hl=en#:~:text=If%20you%20get%20an%20alert,that%20you%20don't%20manage.

GCP72 · Answer

The answer is D

shayke · Answer

A is the right ans

Ballistic_don · Answer

Ans :D

Sundar_Pichai · Answer

Least amount of disruption would mean working with the existing super admin

Professional Cloud Security Engineer Exam - Question 13

Discussion